This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json) Hash identifier: Iy6GOR69DEeAxtKvvnAuO7k75ETxpoRhTf8ATRdO3eI= Subject key identifier: 40:E2:11:A1:A5:0E:90:24:A9:94:55:30:ED:07:F9:60:B0:54:65:67 Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda Certificate serial: 019B08FE8C73B58EC90F065FD50A50C088E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft Manifest number: 0656 Signing time: Wed 10 Dec 2025 16:00:58 +0000 Manifest this update: Wed 10 Dec 2025 16:00:58 +0000 Manifest next update: Thu 11 Dec 2025 16:00:58 +0000 Files and hashes: 1: 0Yi_JnLw94TXhrC5nYi7nz8aE9Q.roa (hash: PcfAm6zv9EFMWgISV3l4XmKFXD7W1Vvh/DKcICx2Ck4=) 2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: 62jmmgccXt4FRlsSbnJP3hQFAuXv44PSEpk5X+pD9N0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fe:8c:73:b5:8e:c9:0f:06:5f:d5:0a:50:c0:88:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda Validity Not Before: Dec 10 16:00:58 2025 GMT Not After : Dec 11 16:00:58 2025 GMT Subject: CN=40e211a1a50e9024a9945530ed07f960b0546567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:17:35:27:39:be:39:da:8b:9e:a1:5f:6e:3b: 90:33:57:ec:75:56:a5:de:ee:6c:3a:74:df:71:ca: a8:d9:c7:f2:ab:84:65:e1:52:45:68:c0:f3:81:cd: f4:21:18:39:d3:83:6d:bd:97:c7:0f:1a:22:6c:5d: 88:93:01:42:af:4e:50:11:65:eb:25:1b:12:47:fe: 43:27:27:74:92:52:5b:42:f5:ef:bb:20:ef:5e:36: ed:6a:95:05:4e:b1:27:7a:65:1f:31:94:09:78:31: 53:09:28:a1:3c:e7:28:79:26:47:fe:5a:5b:f6:39: 2f:ba:e9:51:b6:ac:17:4f:6b:6f:77:28:38:97:f8: 01:53:ad:49:cb:21:5a:e0:ab:15:61:3d:55:03:76: f5:1f:e5:08:6f:f3:ca:d2:98:31:d6:ac:d8:5d:22: 2a:ef:61:4c:de:02:35:33:9a:6c:80:87:03:6a:b2: ba:b9:7c:66:44:bf:dd:bb:58:03:a7:fd:96:69:e5: 1c:9a:13:b6:80:10:e7:b2:9f:44:3c:ae:f3:45:63: ea:a8:87:82:92:b2:38:07:8c:96:5a:b6:d6:f6:01: 90:5a:b7:09:e1:0a:97:7b:44:a9:d1:93:53:14:31: 68:f8:27:65:dc:35:81:53:bd:64:46:04:b2:0b:5e: 5d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E2:11:A1:A5:0E:90:24:A9:94:55:30:ED:07:F9:60:B0:54:65:67 X509v3 Authority Key Identifier: keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:db:a9:78:6b:15:7e:9f:2b:55:3e:2f:f9:e2:fc:f2:7d:f3: fc:04:32:4b:96:88:92:20:0b:66:9e:b1:98:8d:5b:ea:82:6b: 33:be:19:49:75:d4:2a:dc:83:73:42:9f:03:b9:5a:31:f7:94: fd:b9:5a:16:27:45:f1:a1:9d:b7:e7:c9:f4:64:10:47:8a:ed: a8:fb:6c:dd:e2:51:1f:a7:71:1c:aa:70:11:6c:b6:59:3e:7e: f2:b1:84:fe:ed:c3:3f:9f:6e:92:dc:1b:17:50:e0:c2:17:4f: f3:90:54:c0:ac:c5:cf:ce:71:92:42:ae:66:e5:db:9a:e8:d8: 21:d4:3d:79:bd:8d:9f:ad:ab:95:dd:86:eb:31:36:d7:1e:99: 9d:67:de:a7:3a:3d:9f:d8:1f:43:2f:32:bf:56:2f:5b:63:6f: d7:cc:1b:ab:f3:f9:3c:48:6f:50:d1:b0:f0:9c:7f:5a:19:f2: df:5b:ec:e8:c7:dd:2c:10:2b:c7:b3:cc:2a:e1:68:dc:0c:0d: b3:b9:2b:e3:e6:42:28:0e:9f:bd:93:ce:cf:e4:a3:54:c2:aa: 61:16:c0:5d:10:e5:af:5e:97:48:e2:10:fc:4a:bd:d3:6e:fe: d6:e8:53:89:3d:26:19:27:cd:36:24:cf:ed:03:38:21:68:d6: 88:d0:0c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsI/oxztY7JDwZf1QpQwIjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMjFhMTEzZDFiYTAxZDEwN2ZkZjc5MTMwOGMwYTUxZjNk MDZkZGEwHhcNMjUxMjEwMTYwMDU4WhcNMjUxMjExMTYwMDU4WjAzMTEwLwYDVQQD Eyg0MGUyMTFhMWE1MGU5MDI0YTk5NDU1MzBlZDA3Zjk2MGIwNTQ2NTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xc1Jzm+OdqLnqFfbjuQM1fsdVal 3u5sOnTfccqo2cfyq4Rl4VJFaMDzgc30IRg504NtvZfHDxoibF2IkwFCr05QEWXr JRsSR/5DJyd0klJbQvXvuyDvXjbtapUFTrEnemUfMZQJeDFTCSihPOcoeSZH/lpb 9jkvuulRtqwXT2tvdyg4l/gBU61JyyFa4KsVYT1VA3b1H+UIb/PK0pgx1qzYXSIq 72FM3gI1M5psgIcDarK6uXxmRL/du1gDp/2WaeUcmhO2gBDnsp9EPK7zRWPqqIeC krI4B4yWWrbW9gGQWrcJ4QqXe0Sp0ZNTFDFo+Cdl3DWBU71kRgSyC15dQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDiEaGlDpAkqZRVMO0H+WCwVGVnMB8GA1UdIwQY MBaAFKwhoRPRugHRB/33kTCMClHz0G3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYt ZmQ3M2I4MDgzM2I3LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYtZmQ3M2I4MDgzM2I3 LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdupeGsV fp8rVT4v+eL88n3z/AQyS5aIkiALZp6xmI1b6oJrM74ZSXXUKtyDc0KfA7laMfeU /blaFidF8aGdt+fJ9GQQR4rtqPts3eJRH6dxHKpwEWy2WT5+8rGE/u3DP59uktwb F1DgwhdP85BUwKzFz85xkkKuZuXbmujYIdQ9eb2Nn62rld2G6zE21x6ZnWfepzo9 n9gfQy8yv1YvW2Nv18wbq/P5PEhvUNGw8Jx/Whny31vs6MfdLBArx7PMKuFo3AwN s7kr4+ZCKA6fvZPOz+SjVMKqYRbAXRDlr16XSOIQ/Eq9027+1uhTiT0mGSfNNiTP 7QM4IWjWiNAM9Q== -----END CERTIFICATE-----Generated at Wed Dec 10 18:17:53 2025 by rpki-client